cisagov / ansible-role-openvpn

Ansible role to install an OpenVPN server and configure it to authenticate users certificates against FreeIPA.
Creative Commons Zero v1.0 Universal
8 stars 2 forks source link

Prefer unit drop-in files to modification of the OS-provided unit file #80

Closed jsf9k closed 1 month ago

jsf9k commented 1 month ago

💡 Summary

Prefer unit drop-in files to modification of the OS-provided unit file.

Motivation and context

Here we modify the OS-provided unit file for the OpenVPN service: https://github.com/cisagov/ansible-role-openvpn/blob/cf4a1264010ec82353ea84d9a7ea42909a79dc79/tasks/main.yml#L54-L66

The preferred method to change settings like this is to provide a unit file drop-in.